@riffdb/better-auth 0.0.0-stage → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (226) hide show
  1. package/DESIGN.md +273 -0
  2. package/LICENSE-APACHE +201 -0
  3. package/LICENSE-MIT +27 -0
  4. package/README.md +323 -2
  5. package/dist/adapter.d.ts +34 -0
  6. package/dist/adapter.d.ts.map +1 -0
  7. package/dist/adapter.js +1600 -0
  8. package/dist/adapter.js.map +1 -0
  9. package/dist/generated/client.d.ts +2166 -0
  10. package/dist/generated/client.d.ts.map +1 -0
  11. package/dist/generated/client.js +2454 -0
  12. package/dist/generated/client.js.map +1 -0
  13. package/dist/index.d.ts +7 -0
  14. package/dist/index.d.ts.map +1 -0
  15. package/dist/index.js +7 -0
  16. package/dist/index.js.map +1 -0
  17. package/dist/plugin-dispatch.d.ts +37 -0
  18. package/dist/plugin-dispatch.d.ts.map +1 -0
  19. package/dist/plugin-dispatch.js +293 -0
  20. package/dist/plugin-dispatch.js.map +1 -0
  21. package/dist/profile-contract.d.ts +63 -0
  22. package/dist/profile-contract.d.ts.map +1 -0
  23. package/dist/profile-contract.js +543 -0
  24. package/dist/profile-contract.js.map +1 -0
  25. package/dist/profile-plan.d.ts +69 -0
  26. package/dist/profile-plan.d.ts.map +1 -0
  27. package/dist/profile-plan.js +180 -0
  28. package/dist/profile-plan.js.map +1 -0
  29. package/dist/profile.d.ts +48 -0
  30. package/dist/profile.d.ts.map +1 -0
  31. package/dist/profile.js +132 -0
  32. package/dist/profile.js.map +1 -0
  33. package/dist/profiles/custom-fields/profile.d.ts +3 -0
  34. package/dist/profiles/custom-fields/profile.d.ts.map +1 -0
  35. package/dist/profiles/custom-fields/profile.js +475 -0
  36. package/dist/profiles/custom-fields/profile.js.map +1 -0
  37. package/dist/profiles/custom-fields/src/generated/client.d.ts +2710 -0
  38. package/dist/profiles/custom-fields/src/generated/client.d.ts.map +1 -0
  39. package/dist/profiles/custom-fields/src/generated/client.js +2663 -0
  40. package/dist/profiles/custom-fields/src/generated/client.js.map +1 -0
  41. package/dist/profiles/runtime/profile.d.ts +3 -0
  42. package/dist/profiles/runtime/profile.d.ts.map +1 -0
  43. package/dist/profiles/runtime/profile.js +1065 -0
  44. package/dist/profiles/runtime/profile.js.map +1 -0
  45. package/dist/profiles/runtime/src/generated/client.d.ts +4274 -0
  46. package/dist/profiles/runtime/src/generated/client.d.ts.map +1 -0
  47. package/dist/profiles/runtime/src/generated/client.js +4607 -0
  48. package/dist/profiles/runtime/src/generated/client.js.map +1 -0
  49. package/dist/runtime-materialize.d.ts +10 -0
  50. package/dist/runtime-materialize.d.ts.map +1 -0
  51. package/dist/runtime-materialize.js +344 -0
  52. package/dist/runtime-materialize.js.map +1 -0
  53. package/dist/runtime-profile.d.ts +34 -0
  54. package/dist/runtime-profile.d.ts.map +1 -0
  55. package/dist/runtime-profile.js +203 -0
  56. package/dist/runtime-profile.js.map +1 -0
  57. package/dist/testing.d.ts +11 -0
  58. package/dist/testing.d.ts.map +1 -0
  59. package/dist/testing.js +12 -0
  60. package/dist/testing.js.map +1 -0
  61. package/generated/go/client.go +2250 -0
  62. package/generated/mcp/tools.json +13922 -0
  63. package/generated/python/client.py +4454 -0
  64. package/generated/riffdb.application.exact.json +1 -0
  65. package/generated/riffdb.contract.bundle +0 -0
  66. package/generated/rust/client.rs +6524 -0
  67. package/package.json +83 -4
  68. package/profiles/custom-fields/generated/go/client.go +2578 -0
  69. package/profiles/custom-fields/generated/mcp/tools.json +15998 -0
  70. package/profiles/custom-fields/generated/python/client.py +5141 -0
  71. package/profiles/custom-fields/generated/riffdb.application.exact.json +1 -0
  72. package/profiles/custom-fields/generated/riffdb.contract.bundle +0 -0
  73. package/profiles/custom-fields/generated/rust/client.rs +7980 -0
  74. package/profiles/custom-fields/profile.ts +474 -0
  75. package/profiles/custom-fields/riffdb/contract.riff +568 -0
  76. package/profiles/custom-fields/riffdb/queries/admin_users_all_email_asc.riffq +24 -0
  77. package/profiles/custom-fields/riffdb/queries/admin_users_contains_asc.riffq +24 -0
  78. package/profiles/custom-fields/riffdb/queries/admin_users_contains_desc.riffq +24 -0
  79. package/profiles/custom-fields/riffdb/queries/admin_users_email_contains_created_desc.riffq +24 -0
  80. package/profiles/custom-fields/riffdb/queries/admin_users_email_contains_image_asc.riffq +24 -0
  81. package/profiles/custom-fields/riffdb/queries/admin_users_ends_with_asc.riffq +24 -0
  82. package/profiles/custom-fields/riffdb/queries/admin_users_ends_with_desc.riffq +24 -0
  83. package/profiles/custom-fields/riffdb/queries/admin_users_starts_with_asc.riffq +24 -0
  84. package/profiles/custom-fields/riffdb/queries/admin_users_starts_with_desc.riffq +24 -0
  85. package/profiles/custom-fields/riffdb/queries/find_account_by_id.riffq +24 -0
  86. package/profiles/custom-fields/riffdb/queries/find_account_by_provider.riffq +26 -0
  87. package/profiles/custom-fields/riffdb/queries/find_accounts_by_user_id.riffq +25 -0
  88. package/profiles/custom-fields/riffdb/queries/find_accounts_by_user_provider.riffq +27 -0
  89. package/profiles/custom-fields/riffdb/queries/find_active_sessions_by_user_id.riffq +23 -0
  90. package/profiles/custom-fields/riffdb/queries/find_credential_account.riffq +25 -0
  91. package/profiles/custom-fields/riffdb/queries/find_expired_verification_ids.riffq +17 -0
  92. package/profiles/custom-fields/riffdb/queries/find_latest_verification.riffq +20 -0
  93. package/profiles/custom-fields/riffdb/queries/find_session_by_id.riffq +20 -0
  94. package/profiles/custom-fields/riffdb/queries/find_session_by_token.riffq +20 -0
  95. package/profiles/custom-fields/riffdb/queries/find_sessions_by_token_set.riffq +20 -0
  96. package/profiles/custom-fields/riffdb/queries/find_sessions_by_user_id.riffq +21 -0
  97. package/profiles/custom-fields/riffdb/queries/find_user_by_email.riffq +16 -0
  98. package/profiles/custom-fields/riffdb/queries/find_user_by_id.riffq +15 -0
  99. package/profiles/custom-fields/riffdb/queries/find_verification_by_id.riffq +19 -0
  100. package/profiles/custom-fields/riffdb/queries/find_verifications_by_identifier.riffq +21 -0
  101. package/profiles/custom-fields/riffdb/queries/profile_account_with_user_by_provider.riffq +31 -0
  102. package/profiles/custom-fields/riffdb/queries/profile_session_with_user_by_id.riffq +14 -0
  103. package/profiles/custom-fields/riffdb/queries/profile_session_with_user_by_token.riffq +14 -0
  104. package/profiles/custom-fields/riffdb/queries/profile_sessions_with_users_by_token_set.riffq +25 -0
  105. package/profiles/custom-fields/riffdb/queries/profile_user_with_accounts_by_email.riffq +19 -0
  106. package/profiles/custom-fields/riffdb/queries/profile_user_with_accounts_by_id.riffq +19 -0
  107. package/profiles/custom-fields/riffdb.application.json +217 -0
  108. package/profiles/custom-fields/riffdb.application.lock.json +1 -0
  109. package/profiles/custom-fields/riffdb.toml +3 -0
  110. package/profiles/custom-fields/src/generated/client.ts +3096 -0
  111. package/profiles/organization-security/materialization.json +51 -0
  112. package/profiles/organization-security/riffdb/contract.riff +778 -0
  113. package/profiles/organization-security/riffdb/queries/find_account_by_id.riffq +18 -0
  114. package/profiles/organization-security/riffdb/queries/find_invitation_by_email.riffq +17 -0
  115. package/profiles/organization-security/riffdb/queries/find_invitation_by_id.riffq +18 -0
  116. package/profiles/organization-security/riffdb/queries/find_invitation_by_organization_id.riffq +17 -0
  117. package/profiles/organization-security/riffdb/queries/find_member_by_id.riffq +18 -0
  118. package/profiles/organization-security/riffdb/queries/find_member_by_user_id.riffq +17 -0
  119. package/profiles/organization-security/riffdb/queries/find_organization_by_id.riffq +16 -0
  120. package/profiles/organization-security/riffdb/queries/find_organization_by_slug.riffq +16 -0
  121. package/profiles/organization-security/riffdb/queries/find_session_by_id.riffq +18 -0
  122. package/profiles/organization-security/riffdb/queries/find_session_by_token.riffq +16 -0
  123. package/profiles/organization-security/riffdb/queries/find_team_by_id.riffq +18 -0
  124. package/profiles/organization-security/riffdb/queries/find_team_member_by_id.riffq +18 -0
  125. package/profiles/organization-security/riffdb/queries/find_team_member_by_membership_key.riffq +16 -0
  126. package/profiles/organization-security/riffdb/queries/find_team_member_by_team_id.riffq +17 -0
  127. package/profiles/organization-security/riffdb/queries/find_two_factor_by_id.riffq +18 -0
  128. package/profiles/organization-security/riffdb/queries/find_two_factor_by_secret.riffq +17 -0
  129. package/profiles/organization-security/riffdb/queries/find_user_by_email.riffq +16 -0
  130. package/profiles/organization-security/riffdb/queries/find_user_by_id.riffq +16 -0
  131. package/profiles/organization-security/riffdb/queries/find_verification_by_id.riffq +16 -0
  132. package/profiles/organization-security/riffdb/queries/find_verification_by_identifier.riffq +17 -0
  133. package/profiles/organization-security/riffdb.application.json +172 -0
  134. package/profiles/organization-security/riffdb.toml +7 -0
  135. package/profiles/organization-security.profile.json +980 -0
  136. package/profiles/runtime/generated/go/client.go +4511 -0
  137. package/profiles/runtime/generated/mcp/tools.json +30004 -0
  138. package/profiles/runtime/generated/python/client.py +9337 -0
  139. package/profiles/runtime/generated/riffdb.application.exact.json +1 -0
  140. package/profiles/runtime/generated/riffdb.contract.bundle +0 -0
  141. package/profiles/runtime/generated/rust/client.rs +13297 -0
  142. package/profiles/runtime/profile.ts +1064 -0
  143. package/profiles/runtime/riffdb/contract.riff +1053 -0
  144. package/profiles/runtime/riffdb/queries/admin_users_all_email_asc.riffq +24 -0
  145. package/profiles/runtime/riffdb/queries/admin_users_contains_asc.riffq +24 -0
  146. package/profiles/runtime/riffdb/queries/admin_users_contains_desc.riffq +24 -0
  147. package/profiles/runtime/riffdb/queries/admin_users_email_contains_created_desc.riffq +24 -0
  148. package/profiles/runtime/riffdb/queries/admin_users_email_contains_image_asc.riffq +24 -0
  149. package/profiles/runtime/riffdb/queries/admin_users_ends_with_asc.riffq +24 -0
  150. package/profiles/runtime/riffdb/queries/admin_users_ends_with_desc.riffq +24 -0
  151. package/profiles/runtime/riffdb/queries/admin_users_starts_with_asc.riffq +24 -0
  152. package/profiles/runtime/riffdb/queries/admin_users_starts_with_desc.riffq +24 -0
  153. package/profiles/runtime/riffdb/queries/find_account_by_id.riffq +24 -0
  154. package/profiles/runtime/riffdb/queries/find_account_by_provider.riffq +26 -0
  155. package/profiles/runtime/riffdb/queries/find_accounts_by_user_id.riffq +25 -0
  156. package/profiles/runtime/riffdb/queries/find_accounts_by_user_provider.riffq +27 -0
  157. package/profiles/runtime/riffdb/queries/find_active_sessions_by_user_id.riffq +23 -0
  158. package/profiles/runtime/riffdb/queries/find_credential_account.riffq +25 -0
  159. package/profiles/runtime/riffdb/queries/find_expired_verification_ids.riffq +17 -0
  160. package/profiles/runtime/riffdb/queries/find_latest_verification.riffq +20 -0
  161. package/profiles/runtime/riffdb/queries/find_session_by_id.riffq +20 -0
  162. package/profiles/runtime/riffdb/queries/find_session_by_token.riffq +20 -0
  163. package/profiles/runtime/riffdb/queries/find_sessions_by_token_set.riffq +20 -0
  164. package/profiles/runtime/riffdb/queries/find_sessions_by_user_id.riffq +21 -0
  165. package/profiles/runtime/riffdb/queries/find_user_by_email.riffq +16 -0
  166. package/profiles/runtime/riffdb/queries/find_user_by_id.riffq +15 -0
  167. package/profiles/runtime/riffdb/queries/find_verification_by_id.riffq +19 -0
  168. package/profiles/runtime/riffdb/queries/find_verifications_by_identifier.riffq +21 -0
  169. package/profiles/runtime/riffdb/queries/profile_account_with_user_by_provider.riffq +31 -0
  170. package/profiles/runtime/riffdb/queries/profile_invitation_by_email.riffq +17 -0
  171. package/profiles/runtime/riffdb/queries/profile_invitation_by_id.riffq +17 -0
  172. package/profiles/runtime/riffdb/queries/profile_invitation_by_organization_email_status.riffq +19 -0
  173. package/profiles/runtime/riffdb/queries/profile_invitation_by_organization_id.riffq +17 -0
  174. package/profiles/runtime/riffdb/queries/profile_invitation_by_organization_status.riffq +18 -0
  175. package/profiles/runtime/riffdb/queries/profile_member_by_id.riffq +27 -0
  176. package/profiles/runtime/riffdb/queries/profile_member_by_organization.riffq +20 -0
  177. package/profiles/runtime/riffdb/queries/profile_member_by_organization_created_at_asc.riffq +20 -0
  178. package/profiles/runtime/riffdb/queries/profile_member_by_organization_created_at_desc.riffq +20 -0
  179. package/profiles/runtime/riffdb/queries/profile_member_by_organization_role_asc.riffq +20 -0
  180. package/profiles/runtime/riffdb/queries/profile_member_by_organization_role_desc.riffq +20 -0
  181. package/profiles/runtime/riffdb/queries/profile_member_by_organization_user.riffq +28 -0
  182. package/profiles/runtime/riffdb/queries/profile_member_by_user.riffq +27 -0
  183. package/profiles/runtime/riffdb/queries/profile_organization_by_id.riffq +27 -0
  184. package/profiles/runtime/riffdb/queries/profile_organization_by_slug.riffq +27 -0
  185. package/profiles/runtime/riffdb/queries/profile_session_with_user_by_id.riffq +14 -0
  186. package/profiles/runtime/riffdb/queries/profile_session_with_user_by_token.riffq +14 -0
  187. package/profiles/runtime/riffdb/queries/profile_sessions_with_users_by_token_set.riffq +25 -0
  188. package/profiles/runtime/riffdb/queries/profile_two_factor_by_id.riffq +17 -0
  189. package/profiles/runtime/riffdb/queries/profile_two_factor_by_user.riffq +17 -0
  190. package/profiles/runtime/riffdb/queries/profile_user_with_accounts_by_email.riffq +19 -0
  191. package/profiles/runtime/riffdb/queries/profile_user_with_accounts_by_id.riffq +19 -0
  192. package/profiles/runtime/riffdb/queries/profile_users_by_id_set.riffq +8 -0
  193. package/profiles/runtime/riffdb.application.json +324 -0
  194. package/profiles/runtime/riffdb.application.lock.json +1 -0
  195. package/profiles/runtime/riffdb.toml +3 -0
  196. package/profiles/runtime/src/generated/client.ts +5186 -0
  197. package/riffdb/contract.riff +547 -0
  198. package/riffdb/queries/admin_users_all_email_asc.riffq +24 -0
  199. package/riffdb/queries/admin_users_contains_asc.riffq +24 -0
  200. package/riffdb/queries/admin_users_contains_desc.riffq +24 -0
  201. package/riffdb/queries/admin_users_email_contains_created_desc.riffq +24 -0
  202. package/riffdb/queries/admin_users_email_contains_image_asc.riffq +24 -0
  203. package/riffdb/queries/admin_users_ends_with_asc.riffq +24 -0
  204. package/riffdb/queries/admin_users_ends_with_desc.riffq +24 -0
  205. package/riffdb/queries/admin_users_starts_with_asc.riffq +24 -0
  206. package/riffdb/queries/admin_users_starts_with_desc.riffq +24 -0
  207. package/riffdb/queries/find_account_by_id.riffq +24 -0
  208. package/riffdb/queries/find_account_by_provider.riffq +26 -0
  209. package/riffdb/queries/find_accounts_by_user_id.riffq +25 -0
  210. package/riffdb/queries/find_accounts_by_user_provider.riffq +27 -0
  211. package/riffdb/queries/find_active_sessions_by_user_id.riffq +23 -0
  212. package/riffdb/queries/find_credential_account.riffq +25 -0
  213. package/riffdb/queries/find_expired_verification_ids.riffq +17 -0
  214. package/riffdb/queries/find_latest_verification.riffq +20 -0
  215. package/riffdb/queries/find_session_by_id.riffq +20 -0
  216. package/riffdb/queries/find_session_by_token.riffq +20 -0
  217. package/riffdb/queries/find_sessions_by_token_set.riffq +20 -0
  218. package/riffdb/queries/find_sessions_by_user_id.riffq +21 -0
  219. package/riffdb/queries/find_user_by_email.riffq +16 -0
  220. package/riffdb/queries/find_user_by_id.riffq +15 -0
  221. package/riffdb/queries/find_verification_by_id.riffq +19 -0
  222. package/riffdb/queries/find_verifications_by_identifier.riffq +21 -0
  223. package/riffdb.application.json +187 -0
  224. package/riffdb.application.lock.json +1 -0
  225. package/scripts/real-riffdb-runner.mjs +333 -0
  226. package/src/generated/client.ts +2746 -0
@@ -0,0 +1,293 @@
1
+ import { decodeProfileField, encodeProfileField, storageField } from "./runtime-profile.js";
2
+ const column = (field) => field === "organizationId" ? "org_id" : storageField(field);
3
+ const key = (model) => model === "organization" ? "org_id" : `${storageField(model)}_id`;
4
+ const name = (model) => model[0].toUpperCase() + model.slice(1);
5
+ function refuse(operation) { throw new Error(`unsupported compiled profile call: ${operation}`); }
6
+ function uuid(value) {
7
+ if (typeof value !== "string" || !/^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/iu.test(value))
8
+ refuse("UUID");
9
+ return value;
10
+ }
11
+ function matches(where, expected) {
12
+ return where !== undefined && where.length === expected.length && new Set(where.map((clause) => clause.field)).size === where.length &&
13
+ where.every((clause) => clause.connector === "AND" && clause.mode === "sensitive" &&
14
+ expected.some((entry) => entry.field === clause.field && entry.operator === clause.operator));
15
+ }
16
+ /** Dispatches only the finite catalogue emitted with a locked profile. */
17
+ export class ProfilePluginDispatcher {
18
+ profile;
19
+ tenant;
20
+ client;
21
+ constructor(profile, client, tenant) {
22
+ this.profile = profile;
23
+ this.tenant = tenant;
24
+ this.client = client;
25
+ }
26
+ supports(model) {
27
+ return ["organization", "member", "invitation", "twoFactor"].includes(model) &&
28
+ this.profile.plan.models.some((entry) => entry.name === model);
29
+ }
30
+ async joinedCore(model, where, join, many, limit = 1) {
31
+ const targets = Object.keys(join);
32
+ if (targets.length !== 1 || targets[0] !== (model === "user" ? "account" : "user") || limit < 1 || limit > 100 ||
33
+ (join[targets[0]].limit ?? 100) > 100)
34
+ refuse(`core join ${model}`);
35
+ const shape = (fields) => matches(where, fields);
36
+ let method;
37
+ let input;
38
+ if (!many && model === "user" && (shape([{ field: "id", operator: "eq" }]) || shape([{ field: "email", operator: "eq" }]))) {
39
+ const field = where[0].field;
40
+ method = `profileUserWithAccountsBy${name(field)}`;
41
+ input = { value: field === "id" ? uuid(where[0].value) : encodeProfileField(this.fields("user").find((entry) => entry.name === field), where[0].value) };
42
+ }
43
+ else if (!many && model === "session" && (shape([{ field: "id", operator: "eq" }]) || shape([{ field: "token", operator: "eq" }]))) {
44
+ const field = where[0].field;
45
+ method = `profileSessionWithUserBy${name(field)}`;
46
+ input = { value: field === "id" ? uuid(where[0].value) : encodeProfileField(this.fields("session").find((entry) => entry.name === field), where[0].value) };
47
+ }
48
+ else if (many && model === "account" && shape([{ field: "accountId", operator: "eq" }, { field: "providerId", operator: "eq" }])) {
49
+ method = "profileAccountWithUserByProvider";
50
+ input = this.params(model, where);
51
+ }
52
+ else if (many && model === "session" && shape([{ field: "token", operator: "in" }])) {
53
+ const tokens = where[0].value;
54
+ if (!Array.isArray(tokens) || tokens.length > 32)
55
+ refuse("session token set");
56
+ method = "profileSessionsWithUsersByTokenSet";
57
+ input = { tokens: tokens.map((token) => encodeProfileField(this.fields("session").find((entry) => entry.name === "token"), token)) };
58
+ }
59
+ else
60
+ return refuse(`core join ${model}`);
61
+ const { value } = await this.invoke(method, { organization_id: this.tenant, ...input });
62
+ if (value === undefined || value.outcome === "IntegrityFailure")
63
+ refuse("core join integrity");
64
+ return value;
65
+ }
66
+ fields(model) {
67
+ return this.profile.plan.models.find((entry) => entry.name === model)?.fields ?? refuse(model);
68
+ }
69
+ encode(model, row) {
70
+ const fields = this.fields(model);
71
+ if (Object.keys(row).some((field) => field !== "id" && !fields.some((entry) => entry.name === field)))
72
+ refuse(`create ${model} fields`);
73
+ const result = Object.fromEntries(fields.map((field) => [column(field.name), encodeProfileField(field, row[field.name] ?? (field.name === "failedVerificationCount" ? 0 : field.name === "verified" ? true : undefined))]));
74
+ if (model === "twoFactor")
75
+ result.locked_until_millis = BigInt(row.lockedUntil instanceof Date ? row.lockedUntil.getTime() : 0);
76
+ return result;
77
+ }
78
+ decode(model, row) {
79
+ return { id: uuid(row[key(model)]), ...Object.fromEntries(this.fields(model)
80
+ .map((field) => [field.name, decodeProfileField(field, row[column(field.name)])])) };
81
+ }
82
+ async invoke(method, input) {
83
+ const operation = this.client[method];
84
+ if (typeof operation !== "function")
85
+ refuse(method);
86
+ return await operation.call(this.client, input);
87
+ }
88
+ async command(method, input, expected) {
89
+ const result = await this.invoke(method, { request_id: "", organization_id: this.tenant, ...input });
90
+ const outcome = result.outcome ?? refuse(method);
91
+ if (outcome.outcome !== expected)
92
+ throw new Error(`compiled profile command outcome: ${method}/${String(outcome.outcome)}`);
93
+ return outcome;
94
+ }
95
+ async create(model, data) {
96
+ const input = this.encode(model, data);
97
+ await this.command(`create${name(model)}`, { ...input, [key(model)]: uuid(data.id) }, `${name(model)}Created`);
98
+ return { ...data };
99
+ }
100
+ async createMemberAndActivate(data, session, raw, update) {
101
+ if (data.organizationId !== update.activeOrganizationId || data.userId !== session.userId ||
102
+ Object.keys(update).some((field) => field !== "activeOrganizationId" && field !== "updatedAt"))
103
+ refuse("member activation graph");
104
+ await this.command("createMemberAndActivateOrganization", { ...this.encode("member", data), member_id: uuid(data.id),
105
+ session_active_organization_id: update.activeOrganizationId,
106
+ session_id: uuid(session.id), session_user_id: uuid(session.userId), session_revision: raw.revision,
107
+ session_updated_at: encodeProfileField(this.fields("session").find((field) => field.name === "updatedAt"), update.updatedAt ?? session.updatedAt),
108
+ }, "MemberCreated");
109
+ }
110
+ validateJoin(model, join) {
111
+ if (join === undefined || Object.keys(join).length === 0)
112
+ return;
113
+ const allowed = model === "member" ? ["organization", "user"] : model === "organization" ? ["member", "invitation"] : [];
114
+ for (const [target, config] of Object.entries(join)) {
115
+ if (!allowed.includes(target) || (config.limit ?? 100) < 1 || (config.limit ?? 100) > 100 ||
116
+ config.on.to !== (model === "organization" ? "organizationId" : "id") ||
117
+ config.on.from !== (model === "organization" ? "id" : target === "user" ? "userId" : "organizationId"))
118
+ refuse(`join ${model}`);
119
+ }
120
+ }
121
+ select(model, where, order) {
122
+ return this.profile.queries.find((query) => query.model === model && matches(where, query.where) &&
123
+ (order === undefined ? query.order === null : query.order?.[0] === order.field && query.order[1] === order.direction)) ?? refuse(`query ${model}`);
124
+ }
125
+ params(model, where) {
126
+ return Object.fromEntries(where.map((clause) => {
127
+ const field = this.fields(model).find((entry) => entry.name === clause.field);
128
+ const value = clause.field === "id" ? uuid(clause.value) : field === undefined ? refuse("predicate field") : encodeProfileField(field, clause.value);
129
+ return [column(clause.field), value];
130
+ }));
131
+ }
132
+ async read(model, where, limit, order, offset = 0, join) {
133
+ if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 || !Number.isSafeInteger(offset) || offset < 0 || offset > 4096)
134
+ refuse(`bounds ${model}`);
135
+ if (model !== "member" && offset !== 0)
136
+ refuse(`offset ${model}`);
137
+ this.validateJoin(model, join);
138
+ const query = this.select(model, where, order);
139
+ if (join !== undefined && Object.keys(join).length > 0 && query.hydrate === undefined)
140
+ refuse(`join ${model} shape`);
141
+ if (query.cursor && offset !== 0)
142
+ refuse(`offset ${model} shape`);
143
+ const result = await this.invoke(query.method, { organization_id: this.tenant, ...this.params(model, where), limit, offset: BigInt(offset), ...(query.cursor ? { after: null } : {}), ...(model === "member" && query.hydrate === undefined ? { minimum_role: "" } : {}) });
144
+ if (result.nextCursor !== undefined && query.cursor)
145
+ refuse("result bound exceeded");
146
+ const value = result.value ?? refuse("query result");
147
+ if (value.outcome === "Missing")
148
+ return { rows: [], total: 0, raw: [] };
149
+ const raw = (value.rows ?? (value.record === undefined ? refuse("query result shape") : [value.record]));
150
+ if (!Array.isArray(raw) || raw.length > 100)
151
+ refuse("result bound");
152
+ const rows = raw.map((row) => this.decode(model, row));
153
+ if (model === "member" && query.hydrate === undefined && value.total === undefined)
154
+ refuse("missing exact count");
155
+ const total = value.total === undefined ? rows.length : Number(value.total.value);
156
+ if (!Number.isSafeInteger(total) || total < 0)
157
+ refuse("count bound");
158
+ if (query.hydrate === "member" && join !== undefined) {
159
+ for (let i = 0; i < rows.length; i += 1) {
160
+ const row = rows[i];
161
+ if (join.organization !== undefined)
162
+ row.organization = this.decode("organization", value.organizations
163
+ .find((entry) => entry.org_id === row.organizationId) ?? refuse("organization integrity"));
164
+ if (join.user !== undefined)
165
+ row.user = this.decodeUser(value.users
166
+ .find((entry) => entry.user_id === row.userId) ?? refuse("user integrity"));
167
+ }
168
+ }
169
+ if (query.hydrate === "organization" && rows[0] !== undefined && join !== undefined) {
170
+ for (const target of ["member", "invitation"])
171
+ if (join[target] !== undefined) {
172
+ const records = value[`${target}s`];
173
+ if (!Array.isArray(records) || records.length > 100)
174
+ refuse("joined result bound");
175
+ rows[0][target] = records.slice(0, join[target].limit ?? 100).map((row) => this.decode(target, row));
176
+ }
177
+ }
178
+ return { rows, total, raw };
179
+ }
180
+ decodeUser(row) {
181
+ return { id: row.user_id, ...Object.fromEntries(this.fields("user").map((field) => [field.name, decodeProfileField(field, row[storageField(field.name)])])) };
182
+ }
183
+ async usersById(where, limit) {
184
+ if (!matches(where, [{ field: "id", operator: "in" }]) || !Array.isArray(where[0].value) ||
185
+ where[0].value.length > 32 || !Number.isSafeInteger(limit) || limit < 1 || limit > 100)
186
+ refuse("user ID set");
187
+ const ids = [...new Set(where[0].value.map(uuid))];
188
+ if (ids.length === 0)
189
+ return [];
190
+ const result = await this.invoke("profileUsersByIdSet", { organization_id: this.tenant, ids });
191
+ const users = result.value?.users;
192
+ if (!Array.isArray(users) || users.length > 32)
193
+ refuse("user set result");
194
+ return users.slice(0, limit).map((row) => this.decodeUser(row));
195
+ }
196
+ async update(model, where, update) {
197
+ if (Object.keys(update).length === 0 || Object.keys(update).some((field) => !this.fields(model).some((entry) => entry.name === field && entry.reference === undefined)))
198
+ refuse(`update ${model}`);
199
+ // Validate every input before the first snapshot read.
200
+ for (const [field, value] of Object.entries(update))
201
+ encodeProfileField(this.fields(model).find((entry) => entry.name === field), value);
202
+ for (let attempt = 0; attempt < 3; attempt += 1) {
203
+ const current = await this.read(model, where, 1);
204
+ if (current.rows[0] === undefined)
205
+ return null;
206
+ const successor = { ...current.rows[0], ...update };
207
+ const input = this.encode(model, successor);
208
+ const result = await this.invoke(`update${name(model)}`, { ...input, request_id: "", organization_id: this.tenant,
209
+ [key(model)]: uuid(successor.id), expected_revision: current.raw[0].revision });
210
+ if (result.outcome?.outcome === "Stale")
211
+ continue;
212
+ if (result.outcome?.outcome === `${name(model)}Missing`)
213
+ return null;
214
+ if (result.outcome?.outcome !== `${name(model)}Updated`)
215
+ refuse(`update outcome ${model}`);
216
+ return successor;
217
+ }
218
+ throw new Error("compiled profile revision retry budget exhausted");
219
+ }
220
+ async deleteIds(model, ids) {
221
+ if (ids.length === 0)
222
+ return;
223
+ if (ids.length > (model === "organization" ? 1 : 100))
224
+ refuse("delete bound");
225
+ let parent = {};
226
+ if (model === "member" || model === "invitation") {
227
+ if (ids.length !== 1)
228
+ refuse("relationship delete bound");
229
+ const current = await this.read(model, [{ field: "id", operator: "eq", connector: "AND", mode: "sensitive", value: uuid(ids[0]) }], 1);
230
+ if (current.rows[0] === undefined)
231
+ return;
232
+ parent = { org_id: uuid(current.rows[0].organizationId) };
233
+ }
234
+ await this.command(`delete${name(model)}`, { ...parent, ids: ids.map(uuid) }, `${name(model)}Deleted`);
235
+ }
236
+ async increment(model, where, increment, set = {}) {
237
+ const id = where.find((clause) => clause.field === "id")?.value;
238
+ const input = { request_id: "", organization_id: this.tenant, [key(model)]: uuid(id) };
239
+ const shape = (fields) => matches(where, fields);
240
+ let method;
241
+ const value = (field) => where.find((clause) => clause.field === field)?.value;
242
+ if (model === "twoFactor" && shape([{ field: "id", operator: "eq" }]) &&
243
+ Object.keys(increment).length === 1 && increment.failedVerificationCount === 1 && Object.keys(set).length === 0) {
244
+ method = "incrementTwoFactorFailure";
245
+ }
246
+ else if (model === "twoFactor" && shape([{ field: "id", operator: "eq" }, { field: "failedVerificationCount", operator: "gte" }]) &&
247
+ Object.keys(increment).length === 0 && Object.keys(set).length === 1 && set.lockedUntil instanceof Date) {
248
+ method = "lockTwoFactor";
249
+ if (!Number.isSafeInteger(value("failedVerificationCount")) || Number(value("failedVerificationCount")) < 1 || Number(value("failedVerificationCount")) > 1_000_000)
250
+ refuse("lock threshold");
251
+ input.minimum_failures = BigInt(value("failedVerificationCount"));
252
+ input.locked_until = encodeProfileField(this.fields(model).find((field) => field.name === "lockedUntil"), set.lockedUntil);
253
+ input.locked_until_millis = BigInt(set.lockedUntil.getTime());
254
+ }
255
+ else if (model === "twoFactor" && shape([{ field: "id", operator: "eq" }, { field: "lockedUntil", operator: "lte" }]) &&
256
+ Object.keys(increment).length === 0 && Object.keys(set).length === 2 && set.failedVerificationCount === 0 && set.lockedUntil === null) {
257
+ method = "resetExpiredTwoFactor";
258
+ const before = value("lockedUntil");
259
+ if (!(before instanceof Date) || !Number.isFinite(before.getTime()))
260
+ refuse("lock expiry");
261
+ input.before_millis = BigInt(before.getTime());
262
+ }
263
+ else if (model === "twoFactor" && shape([{ field: "id", operator: "eq" }, { field: "backupCodes", operator: "eq" }]) &&
264
+ Object.keys(increment).length === 0 && Object.keys(set).length === 1 && typeof set.backupCodes === "string") {
265
+ method = "replaceTwoFactorBackupCodes";
266
+ const field = this.fields(model).find((entry) => entry.name === "backupCodes");
267
+ input.expected = encodeProfileField(field, value("backupCodes"));
268
+ input.replacement = encodeProfileField(field, set.backupCodes);
269
+ }
270
+ else if (model === "invitation" && shape([{ field: "id", operator: "eq" }, { field: "status", operator: "eq" }]) &&
271
+ Object.keys(increment).length === 0 && Object.keys(set).length === 1 && typeof set.status === "string") {
272
+ method = "transitionInvitation";
273
+ const states = ["pending", "accepted", "rejected", "canceled"];
274
+ if (!states.includes(String(value("status"))) || !states.includes(set.status))
275
+ refuse("invitation status");
276
+ input.expected = value("status");
277
+ input.replacement = set.status;
278
+ }
279
+ else if (model === "invitation" && shape([{ field: "id", operator: "eq" }]) && Object.keys(increment).length === 0 &&
280
+ Object.keys(set).length === 1 && typeof set.status === "string") {
281
+ return await this.update(model, where, set);
282
+ }
283
+ else
284
+ return refuse(`increment ${model}`);
285
+ const { outcome } = await this.invoke(method, input);
286
+ if (outcome?.outcome === "Missing" || outcome?.outcome === "GuardFailed")
287
+ return null;
288
+ if (outcome?.outcome !== "Changed")
289
+ refuse(`increment outcome ${model}`);
290
+ return this.decode(model, outcome);
291
+ }
292
+ }
293
+ //# sourceMappingURL=plugin-dispatch.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"plugin-dispatch.js","sourceRoot":"","sources":["../src/plugin-dispatch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAuD,MAAM,sBAAsB,CAAC;AAIjJ,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AACtG,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;AACzG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEjF,SAAS,MAAM,CAAC,SAAiB,IAAW,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AACjH,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5I,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,OAAO,CAAC,KAA0C,EAAE,QAA0E;IACrI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAClI,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAC/E,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,0EAA0E;AAC1E,MAAM,OAAO,uBAAuB;IAEE,OAAO;IAA0D,MAAM;IAD1F,MAAM,CAAS;IAChC,YAAoC,OAA8B,EAAE,MAAc,EAAmB,MAAc;uBAA/E,OAAO;sBAA0D,MAAM;QACzG,IAAI,CAAC,MAAM,GAAG,MAAgB,CAAC;IACjC,CAAC;IACM,QAAQ,CAAC,KAAa;QAC3B,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACnE,CAAC;IACM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,KAA8B,EAAE,IAAgB,EAAE,IAAa,EAAE,KAAK,GAAG,CAAC;QAC/G,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAC1G,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAE,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,GAAG;YAAE,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,CAAC,MAAsD,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,MAAc,CAAC;QACnB,IAAI,KAAU,CAAC;QACf,IAAI,CAAC,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3H,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAC9B,MAAM,GAAG,4BAA4B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9J,CAAC;aAAM,IAAI,CAAC,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAC9B,MAAM,GAAG,2BAA2B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACjK,CAAC;aAAM,IAAI,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACnI,MAAM,GAAG,kCAAkC,CAAC;YAC5C,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;gBAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC9E,MAAM,GAAG,oCAAoC,CAAC;YAC9C,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAE,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACxI,CAAC;;YAAM,OAAO,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACxF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB;YAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IACO,MAAM,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC;IACO,MAAM,CAAC,KAAa,EAAE,GAAQ;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QACxI,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,KAAK,EACnG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChI,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,MAAM,CAAC,KAAa,EAAE,GAAQ;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;iBACzE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAU;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,SAAS,KAAK,UAAU;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,MAAO,SAA0F,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpI,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAU,EAAE,QAAgB;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5H,OAAO,OAAO,CAAC;IACjB,CAAC;IACM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAS;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/G,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACrB,CAAC;IACM,KAAK,CAAC,uBAAuB,CAAC,IAAS,EAAE,OAAY,EAAE,GAAQ,EAAE,MAAW;QACjF,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACrF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,sBAAsB,IAAI,KAAK,KAAK,WAAW,CAAC;YAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACtI,MAAM,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClH,8BAA8B,EAAE,MAAM,CAAC,oBAAoB;YAC3D,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ;YACnG,kBAAkB,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAE,EAAE,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;SACnJ,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC;IACO,YAAY,CAAC,KAAa,EAAE,IAA4B;QAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjE,MAAM,OAAO,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,GAAG;gBACrF,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrE,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAAE,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IACO,MAAM,CAAC,KAAa,EAAE,KAA0C,EAAE,KAAoD;QAC5H,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YAC9F,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IACvJ,CAAC;IACO,MAAM,CAAC,KAAa,EAAE,KAA8B;QAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACrJ,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IACM,KAAK,CAAC,IAAI,CACf,KAAa,EAAE,KAA0C,EAAE,KAAa,EACxE,KAAoD,EAAE,MAAM,GAAG,CAAC,EAAE,IAAiB;QAEnF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI;YAAE,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QACxJ,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACrH,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7Q,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAU,CAAC;QAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAE,KAAK,CAAC,KAA2B,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;gBACrB,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAG,KAAK,CAAC,aAAuB;yBAC/G,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;oBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAE,KAAK,CAAC,KAAe;yBAC3E,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACpF,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAAE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,MAAM,GAAG,CAAU,CAAC;oBAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;wBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;oBACnF,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAE,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC9B,CAAC;IACO,UAAU,CAAC,GAAQ;QACzB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAChF,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,CAAC;IACM,KAAK,CAAC,SAAS,CAAC,KAA8B,EAAE,KAAa;QAClE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YACrF,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACnH,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAc,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAA8B,EAAE,MAAW;QAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YAAE,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QACnM,uDAAuD;QACvD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAE,EAAE,KAAK,CAAC,CAAC;QAC1I,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC/C,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM;gBAC/G,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnF,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO;gBAAE,SAAS;YAClD,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACrE,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,MAAM,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;YAC3F,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,GAAsB;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9E,IAAI,MAAM,GAAQ,EAAE,CAAC;QACrB,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACvI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO;YAC1C,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzG,CAAC;IACM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,KAA8B,EAAE,SAAc,EAAE,GAAG,GAAQ,EAAE;QACjG,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC;QAChE,MAAM,KAAK,GAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,KAAK,GAAG,CAAC,MAAsD,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,MAAc,CAAC;QACnB,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,KAAK,CAAC;QACvF,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,uBAAuB,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpH,MAAM,GAAG,2BAA2B,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/H,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,YAAY,IAAI,EAAE,CAAC;YAC5G,MAAM,GAAG,eAAe,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,SAAS;gBAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC9L,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAW,CAAC,CAAC;YAC5E,KAAK,CAAC,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5H,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACnH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,uBAAuB,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC1I,MAAM,GAAG,uBAAuB,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,MAAM,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3F,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAClH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAChH,MAAM,GAAG,6BAA6B,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC;YAChF,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACjE,KAAK,CAAC,WAAW,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3G,MAAM,GAAG,sBAAsB,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC3G,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC;QACnE,CAAC;aAAM,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;YAChH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;;YAAM,OAAO,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,EAAE,OAAO,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;CACF"}
@@ -0,0 +1,63 @@
1
+ import type { RiffDBBetterAuthProfilePlan } from "./profile-plan.js";
2
+ export type RiffDBBetterAuthMaterializationErrorCode = "unsupported_field_type" | "reserved_symbol_collision" | "cascade_bound_exceeded" | "invalid_materialization_option";
3
+ export declare class RiffDBBetterAuthMaterializationError extends Error {
4
+ readonly code: RiffDBBetterAuthMaterializationErrorCode;
5
+ readonly detail: string;
6
+ constructor(code: RiffDBBetterAuthMaterializationErrorCode, detail: string);
7
+ }
8
+ export interface RiffDBBetterAuthMaterializationOptions {
9
+ /** Explicit review: nullable unique fields must always be supplied non-null. */
10
+ readonly requireUniqueValues?: boolean;
11
+ /** Compile-time maximum for every generated `string<N>` field. */
12
+ readonly stringBound?: number;
13
+ /** Compile-time maximum for every generated `bytes<N>` field. */
14
+ readonly bytesBound?: number;
15
+ /** Compile-time maximum element count for every generated `list<T,N>` field. */
16
+ readonly listBound?: number;
17
+ /** Per-relationship cascade maximum. */
18
+ readonly cascadeMaximum?: number;
19
+ }
20
+ /**
21
+ * One reference the contract could not enforce, and why.
22
+ *
23
+ * A generated contract declares a `reference` only for the edge that owns the
24
+ * row's aggregate. Every other edge is emitted as an indexed key field: the
25
+ * adapter can still query by it, but RiffDB does not prove the target exists.
26
+ */
27
+ export interface RiffDBBetterAuthUnenforcedReference {
28
+ readonly model: string;
29
+ readonly field: string;
30
+ readonly targetModel: string;
31
+ readonly reason: "cross_aggregate_edge";
32
+ }
33
+ export interface RiffDBBetterAuthAggregateReport {
34
+ readonly name: string;
35
+ readonly root: string;
36
+ readonly children: readonly string[];
37
+ }
38
+ export interface RiffDBBetterAuthGeneratedQuery {
39
+ readonly name: string;
40
+ readonly path: string;
41
+ readonly code: string;
42
+ }
43
+ export interface RiffDBBetterAuthMaterializationReport {
44
+ readonly aggregates: readonly RiffDBBetterAuthAggregateReport[];
45
+ readonly unenforcedReferences: readonly RiffDBBetterAuthUnenforcedReference[];
46
+ readonly requiredUniqueValues: readonly string[];
47
+ }
48
+ export interface RiffDBBetterAuthMaterialization {
49
+ readonly contract: string;
50
+ readonly queries: readonly RiffDBBetterAuthGeneratedQuery[];
51
+ readonly applicationSource: string;
52
+ readonly report: RiffDBBetterAuthMaterializationReport;
53
+ }
54
+ /**
55
+ * Materializes one reviewed plan into compilable RiffDB sources.
56
+ *
57
+ * The returned sources are input to `riffdb application check` and human
58
+ * review, not a deployment. Callers must read
59
+ * {@link RiffDBBetterAuthMaterialization.report} before trusting the result:
60
+ * it names every reference the contract does not enforce.
61
+ */
62
+ export declare function materializeRiffDBBetterAuthProfile(plan: RiffDBBetterAuthProfilePlan, options?: RiffDBBetterAuthMaterializationOptions): RiffDBBetterAuthMaterialization;
63
+ //# sourceMappingURL=profile-contract.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"profile-contract.d.ts","sourceRoot":"","sources":["../src/profile-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,2BAA2B,EAC5B,MAAM,mBAAmB,CAAC;AAkE3B,MAAM,MAAM,wCAAwC,GAChD,wBAAwB,GACxB,2BAA2B,GAC3B,wBAAwB,GACxB,gCAAgC,CAAC;AAErC,qBAAa,oCAAqC,SAAQ,KAAK;aAE3C,IAAI,EAAE,wCAAwC;aAC9C,MAAM,EAAE,MAAM;IAFhC,YACkB,IAAI,EAAE,wCAAwC,EAC9C,MAAM,EAAE,MAAM,EAI/B;CACF;AAMD,MAAM,WAAW,sCAAsC;IACrD,gFAAgF;IAChF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAChE,QAAQ,CAAC,oBAAoB,EAAE,SAAS,mCAAmC,EAAE,CAAC;IAC9E,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC5D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,qCAAqC,CAAC;CACxD;AAwfD;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,2BAA2B,EACjC,OAAO,CAAC,EAAE,sCAAsC,GAC/C,+BAA+B,CAsGjC"}